DSA-5459: -1 amd64-microcode -- security update

Published Jul 25, 2023

Updated

amd64-microcode - security update

Other sources

Tavis Ormandy discovered that under specific microarchitectural circumstances, a vector register in Zen 2 CPUs may not be written to 0 correctly. This flaw allows an attacker to leak register contents across concurrent processes, hyper threads and virtualized guests.

Affected Software

2 affected componentsFixes available

debian/amd64-microcode

3.20250311.1~deb12u13.20230719.1~deb12u1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/amd64-microcode to a version that resolves this vulnerability.
Fixed in 3.20250311.1~deb12u1Fixed in 3.20230719.1~deb12u1
Upgrade
Upgrade amd64-microcode to a version that resolves this vulnerability.
Patch DSA-5459-1

Event History

Jul 25, 2023

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2023-20593

Frequently Asked Questions

Which environments should prioritize this update?

Debian systems using amd64-microcode on Zen 2 CPUs should prioritize it, particularly where untrusted or separate workloads run concurrently. The issue can expose data across processes, hyperthreads, and virtualized guests.

Does virtualization isolate affected workloads from this issue?

No. The flaw can leak vector-register contents across virtualized guests under specific microarchitectural circumstances.

DSA-5459: -1 amd64-microcode -- security update

Other sources

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which environments should prioritize this update?

Does virtualization isolate affected workloads from this issue?

Company

Resources

Contact

Frequently Asked Questions

Which environments should prioritize this update?

Does virtualization isolate affected workloads from this issue?